Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: UqEQ2thhaAWDrOqEPxXHP0jScF9NTcbozxTBwyn1z4w=
Subject key identifier: 65:D2:47:2D:89:D5:FE:E8:A8:8B:DB:91:2C:E7:9F:26:E5:B2:B9:71
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 01A13DEF399C9C7D861A6BC1604130666386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 19A3
Signing time: Thu 15 Oct 2026 05:00:50 +0000
Manifest this update: Thu 15 Oct 2026 05:00:50 +0000
Manifest next update: Fri 16 Oct 2026 05:00:50 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: 3WgLVndliXp7CWGw65aoOfyb4vPxcnMkM+w6n47JnTM=)
2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:39:9c:9c:7d:86:1a:6b:c1:60:41:30:66:63:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Oct 15 05:00:50 2026 GMT
Not After : Oct 16 05:00:50 2026 GMT
Subject: CN=65d2472d89d5fee8a88bdb912ce79f26e5b2b971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:26:04:0e:6b:14:9c:20:bd:d5:83:b2:1b:
9c:50:93:d6:c3:25:26:ba:91:de:96:b8:9e:48:d7:
fa:bc:0a:4b:e3:63:0a:60:c4:21:67:f2:58:92:57:
49:10:74:de:ef:db:f0:c4:39:2e:31:4e:5b:df:0d:
69:5c:a3:67:68:19:44:9d:83:4a:0c:46:a4:9e:c1:
9a:34:7d:95:71:5f:38:7d:65:f8:40:88:0e:98:2e:
bf:2b:3d:cd:0b:a9:ba:97:94:33:c2:5e:53:34:77:
cc:e5:2f:63:28:54:d9:6f:a4:0e:13:11:bd:79:d4:
30:90:c5:78:ae:4a:1f:2e:08:ab:38:dc:f7:cc:c5:
02:8e:7d:44:bf:e1:df:96:2d:be:66:7d:eb:5f:af:
b0:2b:dc:6e:4f:af:b3:75:2a:84:e9:ee:d7:5f:e6:
49:52:e4:8a:fa:f7:e5:41:9c:dc:3e:ac:de:58:22:
92:69:28:6e:0a:e7:92:43:1d:df:e7:bd:42:b7:ba:
af:c3:6e:c1:18:54:ef:53:a3:e9:9e:ab:2f:dd:e6:
cf:3f:ef:a7:60:50:c4:3d:c2:cc:7f:94:d9:c2:82:
73:14:9d:5c:72:48:92:96:82:7c:36:1f:a4:8d:de:
a4:d8:a0:a0:e1:48:d0:54:06:39:58:58:5a:34:27:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D2:47:2D:89:D5:FE:E8:A8:8B:DB:91:2C:E7:9F:26:E5:B2:B9:71
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:38:4a:c5:59:05:f8:66:b1:1a:84:1e:ba:12:a7:c5:18:fc:
18:02:0f:2f:9b:be:09:bd:be:d3:2e:e2:c7:3f:9e:e5:3d:59:
48:5a:cb:4b:d3:f5:3d:10:4d:9e:fd:e5:46:64:f0:a7:de:73:
8b:bf:98:34:f6:df:fb:ad:f9:69:72:7a:23:06:11:b9:d3:46:
b8:4b:0b:3e:30:1e:ad:99:ff:72:08:b1:0a:53:1b:f0:17:24:
2f:84:54:8e:c6:db:8f:ac:bb:27:29:3f:f7:0c:ee:40:fd:44:
37:ed:e7:75:73:d9:37:10:a7:ad:62:da:db:d7:3e:61:00:43:
16:19:71:ae:1b:27:46:0b:b6:60:3c:09:5c:bd:34:75:e8:7a:
2f:5f:62:54:cb:8d:3c:c7:0c:4c:11:7f:b4:97:40:97:73:5c:
e4:71:e2:7a:bd:51:5e:7f:a1:1c:4b:f8:97:14:22:3b:04:3f:
14:7c:8e:6e:db:95:1b:f7:33:50:a2:4a:ed:86:ee:35:f6:c6:
54:28:de:f4:5a:f3:24:12:10:4d:6d:42:e0:15:c8:2b:06:22:
92:cb:f5:24:69:14:61:68:af:02:b9:93:7e:38:72:26:ee:41:
bc:ab:4c:a4:5b:f7:b1:45:26:29:f4:e3:7a:95:80:bf:a5:7b:
fd:2d:be:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97zmcnH2GGmvBYEEwZmOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx
ZTNhYTQwHhcNMjYxMDE1MDUwMDUwWhcNMjYxMDE2MDUwMDUwWjAzMTEwLwYDVQQD
Eyg2NWQyNDcyZDg5ZDVmZWU4YTg4YmRiOTEyY2U3OWYyNmU1YjJiOTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FcmBA5rFJwgvdWDshucUJPWwyUm
upHelrieSNf6vApL42MKYMQhZ/JYkldJEHTe79vwxDkuMU5b3w1pXKNnaBlEnYNK
DEaknsGaNH2VcV84fWX4QIgOmC6/Kz3NC6m6l5Qzwl5TNHfM5S9jKFTZb6QOExG9
edQwkMV4rkofLgirONz3zMUCjn1Ev+Hfli2+Zn3rX6+wK9xuT6+zdSqE6e7XX+ZJ
UuSK+vflQZzcPqzeWCKSaShuCueSQx3f571Ct7qvw27BGFTvU6Ppnqsv3ebPP++n
YFDEPcLMf5TZwoJzFJ1cckiSloJ8Nh+kjd6k2KCg4UjQVAY5WFhaNCeu3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXSRy2J1f7oqIvbkSznnyblsrlxMB8GA1UdIwQY
MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt
ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi
LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDhKxVkF
+GaxGoQeuhKnxRj8GAIPL5u+Cb2+0y7ixz+e5T1ZSFrLS9P1PRBNnv3lRmTwp95z
i7+YNPbf+635aXJ6IwYRudNGuEsLPjAerZn/cgixClMb8BckL4RUjsbbj6y7Jyk/
9wzuQP1EN+3ndXPZNxCnrWLa29c+YQBDFhlxrhsnRgu2YDwJXL00deh6L19iVMuN
PMcMTBF/tJdAl3Nc5HHier1RXn+hHEv4lxQiOwQ/FHyObtuVG/czUKJK7YbuNfbG
VCje9FrzJBIQTW1C4BXIKwYiksv1JGkUYWivArmTfjhyJu5BvKtMpFv3sUUmKfTj
epWAv6V7/S2+cA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:54:44 2026 by rpki-client